Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
File: tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json)
Hash identifier: VKvo61S1zOrhGgcx/7sE7lzHUdhvyZOVrKcW85jVvDU=
Subject key identifier: B6:C2:DE:1B:1C:C6:1D:EC:6E:D0:5D:A9:C0:27:C2:3A:CD:3E:AE:40
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial: 019FAD1B1AD9E0CE83B1A790C739E21EF9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
Manifest number: 02A8
Signing time: Wed 29 Jul 2026 09:01:02 +0000
Manifest this update: Wed 29 Jul 2026 09:01:02 +0000
Manifest next update: Thu 30 Jul 2026 09:01:02 +0000
Files and hashes: 1: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=)
2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: AXKszZn98AyyweqL2uVkuXhEBO8BK6koaeWIsmTcDHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:1a:d9:e0:ce:83:b1:a7:90:c7:39:e2:1e:f9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Validity
Not Before: Jul 29 09:01:02 2026 GMT
Not After : Jul 30 09:01:02 2026 GMT
Subject: CN=b6c2de1b1cc61dec6ed05da9c027c23acd3eae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:61:a9:10:be:72:15:c4:14:af:69:9e:0d:
b7:5a:c6:d9:cf:e8:e4:21:e5:34:e3:dc:99:45:63:
84:3d:32:a0:5d:63:7d:32:ea:5a:a3:3a:4e:40:af:
d7:d2:7d:0d:cc:63:f7:02:80:4c:a6:a1:d6:a4:ea:
3a:73:d5:67:75:9d:c7:89:b7:0a:0e:dd:4e:78:8b:
cd:f2:3e:79:45:d1:26:4e:4c:e1:7c:b1:df:36:49:
95:50:9c:5a:d6:fb:53:0a:55:c6:89:dd:46:f1:90:
b6:8a:97:af:e5:df:21:71:ff:65:23:fc:d3:a4:92:
e5:c3:b7:22:8c:54:0a:fe:0f:bf:2b:b6:34:d9:b5:
21:42:73:5c:ba:76:94:76:76:99:00:97:2f:25:64:
e9:ad:d5:9f:9e:69:bb:7a:a8:f9:4f:de:50:d8:c7:
16:45:ea:7c:00:ec:44:a3:9b:94:83:86:cd:0b:15:
af:ee:73:1e:2a:15:ef:dc:1d:5c:d1:4c:ef:43:b6:
a0:63:1b:3b:0a:7d:84:ba:3a:b3:96:e1:16:c8:90:
ac:d9:34:89:2a:58:e4:d2:c8:cf:7a:1f:9c:55:9c:
03:74:c1:53:d7:a2:af:e8:17:d6:8d:93:05:fe:4a:
85:0d:0b:af:49:1f:36:27:81:9e:9d:9f:8f:a8:38:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:DE:1B:1C:C6:1D:EC:6E:D0:5D:A9:C0:27:C2:3A:CD:3E:AE:40
X509v3 Authority Key Identifier:
keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7e:74:b1:ed:ab:2a:ff:85:c1:07:26:8f:55:66:7a:e2:a3:
51:42:c0:f4:8c:42:7e:33:cb:ce:a9:aa:52:0a:06:cc:35:d6:
04:71:02:53:54:9e:f4:04:bc:af:11:41:1b:84:dc:86:a9:11:
3e:05:70:b4:68:96:9b:2d:03:14:54:bd:a1:3f:c2:8d:c3:7f:
ae:b9:26:0b:c2:2e:a5:e9:31:cb:d0:b4:44:3c:93:6a:e7:00:
a5:89:31:e1:1d:0d:e3:54:9d:f7:e1:6b:15:98:ce:b4:54:3d:
74:d6:e6:88:13:7b:fd:26:09:f0:51:17:86:82:ee:25:0a:f9:
6a:4d:2f:0c:2d:61:95:10:dd:fd:83:71:f1:41:98:52:ad:5c:
cb:57:83:c1:c1:a6:3e:70:e3:dd:fb:b9:12:b2:f0:00:9a:b7:
9e:89:54:e7:7b:80:96:f3:7c:29:cf:d5:86:16:77:e2:7e:75:
53:ad:78:bc:b7:40:63:39:9d:01:35:71:92:ba:9e:1a:73:db:
cb:7f:9c:10:54:23:57:8d:a4:91:f3:37:84:61:51:65:91:f9:
d2:77:d5:16:5f:07:17:03:44:8f:4e:8a:9b:43:4c:11:a8:c3:
f0:ae:33:8d:18:99:ec:6d:e9:57:3b:cf:62:43:00:bd:83:6c:
8d:a3:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:35:47 2026 by rpki-client